Docker Docker Sandboxes

• CVE-2026-121614 High 7.1 Docker Sandboxes host Git executes repository-controlled programs 0.1%
• CVE-2026-103916 High 8.4 Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory 0.2%
• CVE-2026-105452 Medium 5.9 Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts 0.1%
• CVE-2026-101998 Medium 5.9 Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials 0.2%
• CVE-2026-105570 Medium 6.7 Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host 0.1%
• CVE-2026-79994 High 8.7 Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race 0.1%
• CVE-2026-77179 Critical 9.4 Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback 0.2%
• CVE-2026-17106 High 7.1 Tar extraction in moby/go-archive can write outside the destination directory via link following 0.4%
• CVE-2026-18171 Medium 5.7 Docker Sandboxes read-only runtime mount writable through its shared-export alias 0.1%
• CVE-2026-12539 Medium 5.1 Docker Sandboxes ICMP egress restriction bypass after daemon restart 0.1%
• CVE-2026-12039 Medium 5.7 Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution 0.1%